IT

General notice on the processing of personal data

This is a translation; the Italian version is the legally binding text.

Introduction

Animal Law Italia (ALI) is committed to protecting personal data, processing it fairly and transparently, solely for the specific purposes for which explicit consent is given, and without passing it on to third parties.

This document is the general notice on the processing of personal data by our association, drawn up pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, also referred to by its acronym “GDPR” in the rest of this text) and pursuant to Article 13 of Legislative Decree 196/2003 (Italian Personal Data Protection Code).

This notice concerns everyone who comes into contact with ALI in any capacity – such as members, donors, supporters, volunteers and people asking for information about the association’s activities – whether the contact takes place through this website, through other online channels (social networks) or in person (for example by filling in a paper membership form or signing a petition).

At the end there is also a specific notice on the use of cookies on this website.

This notice has been written to be as understandable, concise, clear and simple as possible. If you would like any clarification of its contents, or have doubts about any other matter concerning the use of your personal data, please contact us using the details given in point 8).

1) The data controller

The controller of personal data is the association Animal Law Italia ETS (ALI), a third-sector entity (ETS) with registered office in Bari, via R. Dicillo no. 1 (hereinafter also “ALI” or “the Association”).

2) What data we collect and why

2.1 We collect personal information from users who contact the Association through the ali.ong website, social networks and the other means of contact we make available to users.

2.2 Data is processed lawfully, fairly and transparently in relation to the data subjects. Personal data is collected with the express consent of the data subject, for specified, explicit and legitimate purposes, and is processed in a manner compatible with those purposes at the Association’s premises, using electronic and paper-based systems.

2.3 The purposes of processing are closely linked to ALI’s institutional activities, in relation to the social issues our association deals with. In some cases processing is essential, being necessary for administrative and accounting purposes and/or to comply with obligations laid down by the law in force, with the result that refusing consent in practice prevents the Association from establishing a membership relationship.

2.4 In particular, personal data is provided directly by the user by filling in the form to join the Association and/or the newsletter, contact forms, event registration requests, and by signing petitions and open letters. When subscribing to the newsletter we ask for first name, surname and email address; when applying to join the Association we also ask for date and place of birth, residential address and tax code. Additional information such as occupation and interest in certain subjects may be requested and recorded, so that we can send communications tailored to the interests of members and supporters. For specific campaigns other personal data may be requested and processed, clearly indicated in the specific notices, to which reference is made. Newsletter subscription includes an email address validation mechanism, which prevents communications from being sent in the case of double confirmation.

2.5 Personal data is collected for the following specific purposes, and for the operations closely connected and instrumental to them:

  1. The administrative and accounting management of the membership relationship (as set out in Annex 1);
  2. The management of specific campaigns and, in particular, of petitions, open letters and signature collections, however named;
  3. The administrative and accounting management of donations and legacies;
  4. Sending communications about initiatives, activities and projects carried out thanks to the contribution made;
  5. Sending the newsletter and the journal reserved for supporters and members;
  6. Planned fundraising activities;
  7. Other institutional purposes of ALI, as indicated in other more specific notices placed at the foot of the data collection forms, to which reference is made.

2.6 The data so collected is processed by the Association according to the principles of proportionality and fairness, respecting confidentiality and integrity, solely for purposes connected with its institutional aims, in relation to the specific request made by the data subject, and it may not be used for further purposes without the data subject’s explicit consent.

2.7 To this end, the Association asks for specific consent for each individual processing operation and keeps only the data that is necessary, deleting anything superfluous: applying this principle, if for example a user signing a petition provides their email address but does not at the same time authorise us to send updates, the email address so collected is deleted immediately and the Association will keep only the signatory’s first name and surname.

2.8 Our websites also use cookies, for which please refer to the specific notice in the annex.

2.9 To make the site easier to use, we collect, in anonymous and aggregate form, information about where visitors click on our pages and how far they scroll (so-called «heat maps»). For each visit we record only the page address, without additional parameters, the type of device (smartphone, tablet or computer), the scroll depth and the position of clicks relative to the elements of the page. We do not use cookies or other tools that store information on the device, and we do not keep the IP address, text entered in forms or any other data that could identify you, even indirectly. The data stays exclusively on our servers, is not shared with third parties and is deleted automatically after 90 days.

2.10 If you believe that your data has been used without your knowledge by third parties (identity theft), please contact us as a matter of urgency so that the necessary countermeasures can be taken, also in view of the criminal consequences of such conduct. The Association accepts no liability in such cases and declares itself the injured party.

3) Protection of minors

3.1 ALI takes all the measures necessary to protect the processing of minors’ data in accordance with the law in force.

3.2 The Association allows minors to join from the age of 13, provided that a parent (or whoever acts in their place) gives their express consent to the processing of the data. Otherwise the administrative procedure for accepting the membership application cannot be completed, and the personal data sent is immediately deleted from our IT systems.

3.3 If a parent becomes aware that their minor child has provided personal information to the Association without their consent, or by providing a forged consent, they are asked to contact the secretariat immediately using the methods indicated in point 8), so that the personal data in our possession can be completely deleted.

3.4 Newsletter subscription is reserved for users aged 18 or over. In future the Association may set up a specific newsletter for members and supporters who are minors, whose contents will be carefully assessed by an educator before being sent.

4) How long we keep your data

4.1 Data provided to the Association is kept for a period appropriate to the activity for which the user made contact. The duration of processing therefore depends on the relationship established with the Association and on the resulting administrative, accounting and organisational obligations (e.g. joining as a member, making a donation, subscribing to the newsletter, supporting a specific campaign). It should be noted that the nature of the association relationship is very different from that of a commercial relationship: members and supporters do not merely make a financial contribution but are the stakeholders on whose behalf the Association works and, if they join, they become an integral part of the Association. ALI deals with third parties on behalf of its members, supporters and sympathisers. Therefore everyone who enters into a relationship with ALI contributes to achieving the association’s aims not only by paying a fee but above all through constant support for the initiatives and campaigns it carries out.

4.2 When a cause for ending the relationship with the Association arises, the personal data is removed immediately. By way of example, data is removed in the event of removal from the register of members or of no new donations for a period of more than two years (unless immediate deletion is explicitly requested through the link provided at the foot of every email message); when the specific campaign for which consent to data processing was given has ended (unless express consent was given to keep the data in order to receive other updates from the Association); or upon a request to unsubscribe from the Association’s general newsletter (unless consent was also given for other specific campaigns).

4.3 With specific reference to the newsletter, every communication includes a link that allows you to unsubscribe at any time. In the absence of any action, consent is always presumed to be valid, at least until 31/12/2025.

5) How we protect your data

5.1 Personal data is processed using appropriate paper, electronic and/or telematic tools, through appropriate organisational procedures and IT security measures that prevent unlawful use and unauthorised access, guaranteeing the confidentiality and integrity of the data, as well as the prevention of accidental loss through backup systems.

5.2 The IT systems have appropriate access keys, which are changed periodically in line with the requirements of the regulations in force. In addition, personal data stored on removable media is protected by encryption, so as to prevent unlawful access by unauthorised persons should the media on which it is held be stolen.

6) Who we entrust your data to

6.1 The personal data in our possession may be made available to qualified third parties who provide services instrumental to the purposes indicated in point 2.4, which as such constitute processing operations essential to the Association’s activity. By way of example and not limited to these, such parties include banks, the professionals responsible for maintaining the websites and the electronic and/or telematic tools used by ALI, and the companies responsible for sending the journal to members and supporters. In some cases disclosure of the data is mandatory, in order to comply with laws or regulations (administrative obligations), or to organise and coordinate particular initiatives promoted jointly with other bodies with similar statutory aims.

6.2 The Association undertakes not to disclose the data to third parties for purposes other than those specified. The data is processed within the territory of the European Union. ALI periodically carries out a thorough check of the activities entrusted to third parties, assessing their work and the reliability of their data storage systems.

6.3 As regards data provided through social networks (Facebook, Twitter, Instagram, etc.), ALI takes all the measures at its disposal to ensure that processing is fair and that the rights of the data owner are safeguarded; these measures are in any case conditioned by the nature of the tool itself, by how the user uses it, and by the privacy actions taken directly by the owner of the social network.

6.4 We accept payments through PayPal, Apple Pay, Google Pay and Stripe. When payments are processed, some data is transferred to these services, including the information needed to process or support the payment, such as the purchase total and billing details.

6.5 For further details, see the privacy notices of PayPal, Apple Pay, Google Pay and Stripe.

7) What your rights are

7.1 ALI guarantees every data subject the exercise of their rights, as laid down in Chapter III of the General Data Protection Regulation.

7.2 Each data subject may contact the Association using the methods indicated in point 8) of this notice in order to exercise the following main rights:

  • Right of access to personal data (Art. 15 GDPR), including to learn the purposes on which the processing is based and the categories of personal data processed;
  • Right to rectification (Art. 16 GDPR) where the information is inaccurate, incomplete or out of date;
  • Right to erasure (Art. 17 GDPR), also known as the “right to be forgotten”, which must be carried out “without undue delay” where the conditions set out in that article apply, and which entails the immediate termination of any existing membership relationship;
  • Right to withdraw consent (Art. 7 GDPR) where applicable, without affecting the lawfulness of processing based on consent given before its withdrawal, or to object to processing (Art. 21 GDPR);
  • Right to restriction of processing (Art. 17 GDPR), which allows the processing of personal data concerning the data subject to be restricted while its accuracy is being verified and under the other conditions laid down in that article;

7.3 In addition, each data subject may exercise the right to request that personal data be anonymised or blocked, the right to portability to third parties, and the right to lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali, the Italian Data Protection Authority) if they believe their rights have been infringed.

8) How to exercise your rights

8.1 The persons to whom the personal data refers may exercise their rights by writing to the controller, preferably by email to contatti@ali.ong or by certified email (PEC) to animal.law.italia@pec.it, or by post to: Animal Law Italia ETS, Via R. Dicillo, 1 – 70131 Bari, Italy.

8.2 If the requester uses ordinary post or an email address other than the one already provided to the Association, they must enclose an identity document so that they can be identified; it will be deleted as soon as their identity, and therefore the legitimacy of the request, has been established. If there are doubts about the requester’s identity, the Association reserves the right to suspend the execution of the request for the time needed to obtain the facts required to establish its legitimacy, in any case guaranteeing a reply no later than 30 days from the request.

9) Changes to this notice

The first version of this notice was made available on 24 May 2018; this revision was published on 10 August 2024.

Annex 1 Specific notice on the processing of data provided by members and supporters

1) Data collected

1.1 To allow members and supporters to join, the following personal data is collected in electronic form: first name, surname, tax code, date and place of birth, place and address of residence, telephone and/or mobile number (where provided), email address, date of the membership application, date of approval of the membership application, type of member, method of paying the fee, educational qualification and/or (where provided).

1.2 The processing of this data is considered necessary to ensure proper participation in the association’s activities and will be carried out solely for those purposes.

2) Duration of processing

2.1 Processing ends with the member’s exclusion, resulting from expulsion or non-payment of the membership fee.

2.2 As soon as a cause for exclusion arises, the Association removes from the register of members, without delay, all the personal data in its possession, except the data strictly necessary to identify the individual member in the event of identical names. In particular, only the following essential data will be kept: first name, surname, tax code, date of joining, date of exclusion.

2.3 Personal data for which the member has given explicit consent for other purposes (e.g. email address for receiving the newsletter) will continue to be processed by ALI in accordance with the purposes for which it was provided.

2.4 An excluded member has the right to request the permanent deletion of the data held by the Association by sending a communication containing their personal details to the contacts provided by the association. In any case, ALI will keep a copy of the request for the following five years, with all personal data suitably redacted except the requester’s first name and surname.

3) Cross-reference

For everything not expressly governed by this annex, the general notice applies.

Annex 2 Specific notice on the use of cookies

In short: ali.ong uses only technical cookies, which do not require your consent. We do not use profiling, advertising or statistics cookies that identify you, which is why you do not see a banner. Content from other sites loads only if you ask for it. The same applies to retefelina.it, the site of our Rete Felina project.

Cookies on this site

The site does not set any cookies of its own for visitors. People who log in to the reserved area to manage the site receive WordPress’s technical cookies (wordpress_logged_in_*, wordpress_sec_*, wp-settings-*), which are needed to stay logged in.

Visit statistics

We count visits with Umami, installed on a server in Germany, with no third-party services. Umami does not use cookies, does not store anything in your browser and does not identify you: it records only aggregate data, such as the pages viewed and the country of origin.

Signature, sign-up and donation forms

Petitions, newsletter sign-ups and donations go through our own platform, served from go.ali.ong. When a form appears on a page it may set two technical cookies, sentient_session and XSRF-TOKEN, which make the form work securely and last two hours at most.

Card donations are handled by Stripe. On pages with a donation form, Stripe sets technical fraud-prevention cookies (__stripe_mid, one year; __stripe_sid, 30 minutes; m, up to 400 days), which are needed to accept payments securely. If you choose PayPal, the payment opens in a PayPal window. Stripe’s notice: stripe.com/legal/cookies-policy.

Content from other sites

Some pages contain YouTube and Vimeo videos, Spotify podcasts, posts from X and Facebook, and Google Drive documents. They do not load until you press «Load content» («Carica il contenuto» on Italian pages): until then the external service receives nothing, not even your IP address. After the click the service may set its own cookies, under its own rules. YouTube videos load in privacy-enhanced mode (youtube-nocookie.com).

Fonts

The site’s fonts are hosted on our own server: no request goes out to external services such as Google Fonts.

How to manage cookies

You can view and delete cookies in your browser settings. Blocking the forms’ technical cookies prevents you from signing, subscribing or donating; the rest of the site works regardless.

Last updated: 3 November 2026.